Free interactive tool
AI Password Generator
Strong passwords you can actually remember. Pick a theme you like and AI builds a vocabulary around it; your browser then chooses the words with cryptographic randomness, so the result is both memorable and hard to guess.
Generating…
Describe something you like. AI builds a vocabulary around it, and your browser picks the words.
Loading word list…
Created on your device
Every word, character and digit is chosen in your browser with crypto.getRandomValues. Nothing you generate is sent, stored or logged.
AI picks the vocabulary
Type a theme and AI suggests a few hundred words about it. It never sees the password, and the strength shown accounts for the smaller list.
Strength you can trust
Bits are calculated from how the password was made, not guessed from how it looks, so a passphrase that reads easily still scores honestly.
How to use it well
- Choose Memorable for a password you will type yourself, like your password manager's master password. Add a theme if a familiar subject makes it easier to recall.
- Choose Random for accounts your password manager fills for you. 20 or more characters is plenty.
- Use PIN only for phones, cards and devices that lock after a few wrong tries.
- Aim for 60 bits or more. Length beats complexity: current NIST guidance favours long passwords and drops forced symbol rules.
- Check an existing password with the password strength and breach check, and switch to passkeys wherever a site offers them.
The default vocabulary is the EFF large wordlist (7,776 words, CC BY 3.0 US). Theme vocabularies come from Cloudflare Workers AI.
FAQ
- Does the AI see my password?
- No. The AI only receives the theme you type, such as "ocean". It returns a list of words, and your browser picks from that list using crypto.getRandomValues. The password is created on your device and is never sent anywhere.
- Why not let the AI write the whole password?
- Language models are built to produce likely text, so they repeat favourite words and patterns. That makes their output guessable. Randomness has to come from a cryptographic source, which is why the AI chooses the vocabulary and your browser chooses the words.
- How is the strength calculated?
- From how the password was generated, not from how it looks. A word picked at random from 7,776 words adds about 12.9 bits; a character picked from 70 adds about 6.1. The total is shown in bits, and the time to guess assumes an offline attacker making 100 billion guesses a second.
- Is a themed passphrase weaker?
- No. Theme words alternate with words drawn from the full 7,776-word list, so the passphrase reads like your theme while most of its strength comes from the large list. The strength shown counts both lists exactly, and words are added if needed to stay above 60 bits.
- Should I use a passphrase or a random password?
- Use a memorable passphrase for the few things you must type from memory, such as your password manager's master password or your computer login. Let a password manager store random passwords for everything else, and use passkeys wherever a site offers them.